Buggy code:
@ Controller @ RequestMapping ( "//" ) public class AppDirectEventController { @ Autowired private SubscriptionService subscriptionService ; @ Autowired private UserService userService ; @ Autowired private SecurityUtil securityUtil ; @ Autowired private EventFetchUtil eventFetchUtil ; private static Logger LOGGER = LoggerFactory . getLogger ( WebApplicationController . class ) ; <START_BUG> @ RequestMapping ( value = "//appdirect//subscription//order" , method = RequestMethod . GET , produces = "application//xml" ) <END_BUG> @ ResponseBody public Result order ( @ RequestHeader ( value = "Authorization" , required = false ) String credentials , @ RequestParam ( value = "url" , required = true ) String eventURL ) { Result response = null ; if ( securityUtil . verifyHeader ( credentials ) ) { try { HttpGet signedGetRequest = securityUtil . signOutgoingURL ( eventURL ) ; String eventXml = eventFetchUtil . getEventXml ( signedGetRequest ) ; response = subscriptionService . handleSubscriptionOrder ( eventXml ) ; } catch ( JAXBException e ) { AppDirectEventController . LOGGER . error ( "JAXBException<seq2seq4repair_space>in<seq2seq4repair_space>order<seq2seq4repair_space>subscription" , e ) ; response = new Result ( Boolean . FALSE , "Issue<seq2seq4repair_space>with<seq2seq4repair_space>xml<seq2seq4repair_space>response<seq2seq4repair_space>of<seq2seq4repair_space>event" , "INVALID_RESPONSE" , null ) ; } catch ( Exception e ) { AppDirectEventController . LOGGER . error ( "Exception<seq2seq4repair_space>in<seq2seq4repair_space>order<seq2seq4repair_space>subscription" , e ) ; response = new Result ( Boolean . FALSE , "Could<seq2seq4repair_space>not<seq2seq4repair_space>process<seq2seq4repair_space>event<seq2seq4repair_space>due<seq2seq4repair_space>to<seq2seq4repair_space>exception" , "UNKNOWN_ERROR" , null ) ; } } else { response = new Result ( Boolean . FALSE , "Failed<seq2seq4repair_space>to<seq2seq4repair_space>validate<seq2seq4repair_space>OAuth" , "UNAUTHORIZED" , null ) ; } return response ; } @ RequestMapping ( value = "//appdirect//subscription//change" , method = RequestMethod . GET ) public ResponseEntity < String > change ( @ RequestHeader ( value = "Authorization" , required = false ) String credentials , @ RequestParam ( value = "url" , required = true ) String eventURL ) { } @ RequestMapping ( value = "//appdirect//subscription//cancel" , method = RequestMethod . GET ) public ResponseEntity < String > cancel ( @ RequestHeader ( value = "Authorization" , required = false ) String credentials , @ RequestParam ( value = "url" , required = true ) String eventURL ) { } @ RequestMapping ( value = "//appdirect//subscription//notice" , method = RequestMethod . GET ) public ResponseEntity < String > notice ( @ RequestHeader ( value = "Authorization" , required = false ) String credentials , @ RequestParam ( value = "url" , required = true ) String eventURL ) { } @ RequestMapping ( value = "//appdirect//user//assign" , method = RequestMethod . GET ) public ResponseEntity < String > assign ( @ RequestHeader ( value = "Authorization" , required = false ) String credentials , @ RequestParam ( value = "url" , required = true ) String eventURL ) { } @ RequestMapping ( value = "//appdirect//user//unassign" , method = RequestMethod . GET ) public ResponseEntity < String > unAssign ( @ RequestHeader ( value = "Authorization" , required = false ) String credentials , @ RequestParam ( value = "url" , required = true ) String eventURL ) { } }

Fix:
@ RequestMapping ( value = "//appdirect//subscription//order" , method = RequestMethod . GET )